SShortSingh.
Back to feed

Argo CD: 62,236 hosts fingerprinted, but only 497 answer on its documented port 8080

0
·9 views

A ZoomEye search on 26 October 2026 found 62,236 hosts matching the Argo CD fingerprint, the largest internet footprint measured in the series. Only 497 of them, under one percent, respond on port 8080, the port used in the getting-started instructions. Most deployments instead sit behind an ingress on port 443 with TLS, and about 25,079 hosts were found there. The analysis also notes the fingerprint's near-identical match to the page title makes it fragile across future releases, and that a port-based scan would miss over 99 percent of the population. Argo CD is highlighted as a sensitive target because it holds credentials for managed clusters and exposes repository and cluster details.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

How the RISC acronym faded from ARM's name over decades of processor history

A developer recounts their path from hand-keying hexadecimal machine code on a Samsung SPC-1000 to writing ARM assembly on embedded Linux boards. They describe learning MASM in a systems course and studying the RISC design ideas of pipelining, hazard handling, compiler techniques, and caching. The author notes that the RISC-versus-CISC rivalry later seemed largely pointless, since Intel's Pentiums borrowed RISC ideas and the RISC instruction count was never truly small. Their own experience with ARM, XScale, and Linux smartphone projects led them to realize the R in ARM no longer clearly means RISC.

0
ProgrammingDEV Community ·

Designing Explainable Handoffs Before Automating Them

A fallback that sends an item to a person is incomplete if the reviewer cannot tell why it arrived, what the system already checked, or which source is authoritative. The article argues that handoffs should carry the observed facts, the system's interpretation, unresolved questions, and a clear requested action, so a reviewer can reject an interpretation without losing the evidence. It separates reception and commercial follow-up work, since an unresolved service issue should not automatically become a sales opportunity. It also calls for clear ownership, explicit state transitions, and escalation paths to avoid duplicate tasks and responsibility gaps. The author presents these as proposed requirements with an illustrative example, not as deployed or measured results, and suggests tracking unresolved ownership and corrected interpretations alongside response time.

0
ProgrammingHacker News ·

Behind the Scenes: How an Animated Film Gets Made

A Hacker News post links to Disney Animation's website page describing its production process. The shared item includes only the link and discussion metadata, with 10 points and 3 comments. The post does not include the article's full text, so specific details about the production steps are not available here. Readers are directed to the Disney Animation page for information on how its films are created.

0
ProgrammingDEV Community ·

k0t Campaign Exploits Fortinet and Palo Alto Edge Devices, Exposing 70,000+ Credentials

Group-IB and NyxLab have disclosed a campaign by a threat actor known as k0t that scans for internet-exposed Fortinet and Palo Alto Networks edge appliances and then breaches them. The intrusions rely on exploits for CVE-2025-64446 and CVE-2026-0257, or on brute-forced logins where exploits fail. More than 70,000 credentials tied to firewalls, VPN gateways and LDAP directories have been exposed, and some victims later appeared on the leak sites of the Qilin and The Gentlemen ransomware groups. Targeting is driven by product and geography rather than industry, with North America, Europe and parts of APAC named as priorities. Defenders are advised to apply the vendors' patches, rotate credentials on exposed devices and directory services, and enforce MFA on VPN access.